Source: OJ L, 2024/1773, 25.6.2024

Current language: FR

Article 7 Conflits d’intérêts


Summary What does Article 7 of the RTS on ICT third-party service provider policy say?

Article 7 addresses conflict of interest management in the context of ICT third-party service provider relationships.

It requires the policy to set out measures for identifying, preventing, and managing conflicts of interest both before and during contractual arrangements.

It also adds a specific rule for intra-group arrangements, where there is a heightened risk that commercial decisions could be influenced by internal relationships rather than objective criteria.

Important points:

  • Ensure your policy includes measures to identify, prevent, and manage conflicts of interest arising from ICT third-party service providers, both before signing and on an ongoing basis.
  • Where ICT services supporting critical or important functions are provided by an intra-group provider, your policy must require that decisions on service conditions, including financial terms, are taken objectively.
  • This article connects directly to the broader policy framework established throughout the regulation, meaning these conflict of interest requirements must be embedded within that overarching policy document.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

    1. La politique précise les mesures appropriées de détection, de prévention et de gestion des conflits d’intérêts réels ou potentiels découlant du recours à des prestataires tiers de services TIC qui doivent être prises avant la conclusion de tout accord contractuel en la matière, et elle prévoit un suivi permanent de ces conflits d’intérêts.

    1. Lorsque des services TIC soutenant des fonctions critiques ou importantes sont fournis par des prestataires de services TIC intragroupe, la politique précise que les décisions relatives aux conditions, y compris financières, régissant ces services doivent être prises de manière objective.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod